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AMENDMENTS TO THE CLAIMS: 

This listing of claims replaces all prior versions and listings of claims in the 
application: 

LISTING OF CLAIMS : 

1 . (Currently Amended) A method comprising: 
using a delegation service provider to: 

r e c e iving receive, from a delegator, a designation of a role and a delegate 
to assume the role; 

r e c e iving receive , from a credential service provider, an indication that the 
designation is valid; 

g e n e rating generate a delegation credential in response to receiving the 
indication; and 

r e c e iving a r e qu e st from th e d e l e gat e for access to a s e rvic e ; 
providing provide the delegation credential to the delegator or delegate m 
r e spons e to th e r e qu e st ; and 
using the credential service provider to: 



receive the delegation credential as part of a process for accessing a 



service; 



receive an access requirement for accessing the service, the access 



requirement being received from a reiving partv that provides the service; 
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s e nding determine if the delegation credential is valid for the access 
requirement wherein determining if the delegation credential is valid comprises 
providing the delegation credential to a verification service that compares the 
se l e ct e d delegation credential to permissibl e pre-existing delegation credentials 
that correspond to the access requirement for th e d e l e gat e ; and 

enable access to the service if the delegation credential comprises a valid 
delegation credential for the delegate 
g e n e rating a r e port via th e v e rification s e rvic e r e garding usag e of th e d e l e gation 
cr e dential by th e d e l e gat e. 

2. (Cancelled) 

3. (Previously Presented) The method of claim 1, wherein the delegation credential 
allows the delegate to access the service. 

4. (Currently Amended) The method of claim 1 , wherein the delegation service provider 
issues fiirth e r comprising: issuing a confirmation to the delegator which indicates that the 
delegation credential was generated. 



5. (Original) The method of claim 1 , wherein the delegator can delegate multiple 
fiinctions, the role comprising one of the multiple functions. 
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6. (Currently Amended) The method of claim 1 , wherein the delegation credential is 
issu e d provided from the delegation service provide to, and stored by, at least one of the delegate 
and a the credential service provider. 

7 and 8. (Cancelled) 

9. (Currently Amended) The method of claim i %, wherein multiple delegation 
credentials correspond to the access requirement and the credential service provider provides the 
multiple delegation credentials to the delegate. 

10. (Currently Amended) The method of claim 9, wherein the delegate selects the 
delegation credential from among the multiple delegation credentials for use by the credential 
serviced provider to us e for th e acc e ss r e quir e m e nt and th e cr e d e ntial servic e provid e r provides 
th e d e l e gation cr e d e ntial to th e r e lying party . 

1 1 . (Currently Amended) A method comprising: 

receiving a request from for a delegate for to access te a service; 
obtaining delegation credentials for the delegate; 

determining which of the delegation credentials correspond to an access requirement for 
the service; 
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providing, to the delegate, delegation credentials that correspond to the access 
requirement; 

receiving, from the delegate, an indication corresponding to a selected delegation 
credential; 

sending a the selected delegation credential to a verification service that compares the 
selected delegation credential to permissible delegation credentials for the delegate; and 

using the selected delegation credential to access the service if the selected delegation 
credential comprises a permissible delegation credential for the delegate ; and 

g e n e rating a r e port via th e v e rification s e rvic e r e garding usage of the d e l e gation 
cr e d e ntial by th e d e l e gat e. 

12 and 13. (Cancelled) 

14. (Currently Amended) The method of claim ii wherein sending is performed 
prior to using the selected delegation credential to access the service. 

15. (Currently Amended) The method of claim ii 44, further comprising; 
receiving an indication that the selected delegation credential is valid prior to using the 

selected delegation credential to access the service. 

16 to 22. (Cancelled) 
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23. (Currently Amended) An article comprising a one or more machine-readable 
m e dium media that stor e s store executable instructions that cause a machin e one or more 
machines to: 

receive, from a delegator, a designation of a role and a delegate to assume the role; 
receive, from a credential service provider, an indication that the designation is valid; 
generate a delegation credential in response to receiving the indication; 
r e c e iv e a requ e st from th e d e l e gat e for acc e s s to a s e rvic e ; 

provide the delegation credential to the delegator or delegate in r e spons e to th e r e qu e st ; 

CtlXtl 

receive the delegation credential as part of a process for accessing a service; 

receive an access requirement for accessing the service, the access requirement being 
received from a reiving party that provides the service; 

seftd determine if the delegation credential is valid for the access requirement, wherein 
determining if the delegation credential is valid comprises providing the delegation credential to 
a verification service that compares the s e lect e d delegation credential to p e rmissibl e pre-existing 
delegation credentials that correspond to the access requirement for th e d e l e gat e ; and 

enable access to the service if the delegation credential comprises a valid delegation 
credential for the delegate 

g e n e rat e a r e port via th e v e rification s e rvic e regarding usage of the d e l e gation cr e d e ntial 
by th e d e l e gat e. 



Applicants : Ernie F. Brickell, et al. 

Serial No. : 09/998,549 

Filed : November 28, 2001 

Page : 7 of 13 



Attorney's Docket No.: 10559-505001 
Intel Docket No.: P8790X 



24. (Cancelled) 

25. (Previously Presented) The article of claim 23, wherein the delegation credential 
allows the delegate to access the service. 

26. (Currently Amended) The article of claim 23, fiirther comprising instructions that 
cause the machin e one or more machines to: 

issue a confirmation to the delegator which indicates that the delegation credential was 
generated. 

27. (Original) The article of claim 23, wherein the delegator can delegate multiple 
functions, the role comprising one of the multiple functions. 

28. (Previously Presented) The article of claim 23, wherein the delegation credential is 
issued to, and stored by, at least one of the delegate and a credential service provider. 

29. (Currently Amended) An article comprising a machine-readable medium that stores 
executable instructions that cause a machine to: 

receive a request from for a delegate fer to access te a service; 
obtain delegation credentials for the delegate; 
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determine which of the delegation credentials correspond to an access requirement for the 
service; 

provide, to the delegate, delegation credentials that correspond to the access requirement; 
receive, from the delegate, an indication corresponding to a selected delegation 
credential; 

send a selected delegation credential to a verification service that compares the selected 
delegation credential to permissible delegation credentials for the delegate; and 

use the selected delegation credential to access the service if the selected delegation 
credential comprises a permissible delegation credential for the delegater ^nd 

g e n e rate a report via th e v e rification s e rvic e r e garding usag e of th e d e l e gation cr e d e ntial 
by th e d e legat e . 

30 and 31. (Cancelled) 

32. (Currently Amended) The article of claim 29 34-, wherein sending is performed prior 
to using the selected delegation credential to access the service. 

33. (Currently Amended) The article of claim 29 34-, further comprising instructions that 
cause the machine to: 

receive an indication that the selected delegation credential is valid prior to using the 
selected delegation credential to access the service. 
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34 to 40. (Cancelled) 



